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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A rights management architecture system for 
securely delivering content to authorized consumers, the architecture system comprising: 

a content provider, 

a consumer system configured for requesting content from the content provider 
[[;]] ^wherein the content provider is configured for generating a session rights object for 
accessing the content; 

a [[KDC (]] key distribution center [[)]] configured for providing authorization 
data to the consumer system , th e authorization data for use in accessing the content; and 

a caching server configured for comparing information in the session rights 
object with the authorization data [[; and 

the]] , wherein the caching server is configured for forwarding the requested 
content to the consumer system if the information matches the authorization dat a, and wherein 
the caching server and the consumer system are configured to exchange a plurality of 
encrypted control messages to be used in transferring the requested content . 

2. (Currently Amended) The archit e ctur e system of claim 1 wherein the 
consumer system is redirected to the caching server to receive the requested content. 

3. (Currently Amended) The architecture system of claim 1 wherein the 
caching server and the content provider are combined into a single system identified . 
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4. (Currently Amended) The archit e cture system of claim 1 wherein the 
caching server employs real time streaming for securely forwarding the encrypted content. 

5. (Currently Amended) The architecture system of claim 1 wherein the 
requested content is encrypted for forwarding to the consumer system. 

6. (Canceled) 

7. (Currently Amended) The architecture system of claim 6 1 wherein the 
control messages are encrypted and authenticated. 

8. (Currently Amended) The architecture system of claim 5 wherein the 
caching server comprises one or more cache disks for storing encrypted content, 

9 . (Currently Amended) The architecture system of claim 5 wherein the 
KB€ key distribution center distributes cryptographic keys, the KDC key distribution center 
employing a blend of symmetric and public algorithms for distributing the cryptographic keys. 

10. (Currently Amended) The architecture system of claim 5 further 
comprising wherein a key management protocol i^used for establishing keys between the 
caching server and the consumer system. 

1 1 . (Currently Amended) The architecture system of claim 1 0 wherein the 
key management protocol comprises,: 

a key request message for requesting a session key from the caching server^ and 

responsive thereof, a key reply message for providing the session key to the 
consumer system. 

1 2. (Currently Amended) The architecture system of claim 1 1 wherein: 
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the session rights object and the authorization data are included in the key request 

message; 

wherein the caching server compares is configured to compare information in 
the session rights object to the authorization data; and 

if the information matches the authorization data, the session key being is 
provided to the consumer system. 

13. (Currently Amended) The architecture system of claim 12 wherein the 
content provider generates is configured to generate the session rights object specifying the 
user's access privileges for the content. 

14. (Currently Amended) A rights management m ethod for securely 
delivering content upon request from a caching server, the method comprising: 

providing the caching server comprising a key distribution server: 

providing a content provider communicflbly comprising a key distribution 
client the content provider communicatively coupled to the ([a]] caching server; 

providing a key management protocol comprising the steps o£ 

forwarding a ticket challenge message from the caching server to the content 
provider, the challenge message for initiating key management; 

responsive thereof; sending a key request message which includes a caching 
server ticket from the content provider to the caching server; 

responsive thereof; sending a key reply message from the caching server to the 
content provider; 
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responsive thereof, sending a security established message from the content 
provider to the caching server; and 

establishing a set of keys for securely delivering content from the content provider 
to the caching server. 

1 5 . (Currently Amended) The method of claim 14 further comprising: 
providing a consumer system for streaming content from the caching server. 

16. (Currently Amended) The method of claim 14 further comprising: 

providing a key distribution center for establishing trust between the caching 
server and the content provider. 

17. (Currently Amended) A rights management method for securely pre- 
positioning content at a caching server, the method comprising: 

providing a caching server; 

providing a content provider communicably communicatively coupled to the 
[[a]] caching server; 

providing a key management protocol comprising the steps of, 

forwarding a key request message from the content provider to the caching server, 
the key request message for initiating key management; 

responsive thereof, sending a key reply message from the caching server to the 
content provider; and 

establishing a set of keys for securely delivering content from the content provider 
to the caching server. 
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1 8. (Currently Amended) The method of claim 1 7 further comprising: 



providing a consumer system for streaming content from the caching server. 



19. (Currently Amended) The method of claim 17 further comprising^ 



providing a key distribution center for establishing trust between the caching 
server and the content provider. 

20. (Currently Amended) An authentication system allowing an authorized 
user to stream content from a caching server within a computing network, the system 
comprising: 



a content provider configured for providing the content to the caching server for 
access by the user; 



receiving from the content provider [[,]] a first request to access the 
caching server, and if authenticated the content provider delivers the content to the caching 
server; and 

the key distribution center receiving from the user ({J] a second request to 
access the caching server^ and if authenticated the user is allowed to stream the content from the 
caching server. 

2 1 . (Original) The authentication system of claim 20 wherein the second request 
is for a caching server ticket to access the caching server. 

22. (Currently Amended) A protocol method for securing data transfer 
between components of a communication networ k, the method comprising : 



the caching server; 



a key distribution center configured for: 



PAGE 11/16 1 RCVD AT 11/3/2005 1:13:04 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-_6/27 * DNIS:2738300 * CSID: * DURATION (mm-ss):0346 



NOV. 3.2005 12:16PM ' TOWNSEND & TOWNSEND 



NO. 90 15 — P. 12 



Appl. No. 10/092,347 

Anidt, dated November 3, 2005 

Reply to Office Action of July 26, 2005 



PATENT 



a) providing a central server having a database; 

b) publishing content metadata from a content provider to the central server; 

c) providing a billing center server, comnranicably coupled to the central server; 

d) reporting billing information from a caching server to the billing center server, 

e) providing a provisioning database, coupled to the central server; 

f) updating the provisioning database with consumer information; and 

g) using a key management protocol to securely transfer data during any one or 



more of step b), step d), and step f). 

23 . (Currently Amended) The protocol method of claim 22 wherein the key 
management protocol comprises: 



forwarding a key request message for requesting a session key; and 

receiving a key reply message for providing a session key. 

24. (New) The method of claim 14, wherein the key management protocol is 



further employed to allow a user to securely receive content from the caching server. 
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